3 ms·

This would also add the requirement of an accurate internal clock.

• Scoundreller 1y ago
  Driveby bricking of passports, coming to an airport near you!
  • namibj 1y ago
    German id cards essentially record the newest issuance timestamp seen; then they block certificates that expired prior to this recorded value.
    • cperciva 1y ago
      So one erroneously issued certificate can brick every ID card in the country?
      • ACCount37 1y ago
        Pretty much. But you would need, first, to issue a valid certificate with a timestamp far ahead in the future. And then expose every ID card in the country to it.
• throwaway89201 1y ago
  In theory, you can add some more complexity/fragility and have 'time notaries' sign the current time together with a challenge from the passport, verifiable against embedded public keys.